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rECHNICAL MEMORANDUM X- 64625 

REDUNDANCY MANAGEMENT OF 
ELECTROHYDRAULIC SERVOACTUATGRS BY 
MATHEMATICAL MODEL REFERENCING 

INTRODUCTION 

As the size and complexity of space vehicles and aircraft are increas- 
ing, more and more emphasis is being placed on safety. This emphasis is be- 
ing reflected in the design of electrohydraulic control systems by the use of 
both highly reliable components and redundant systems. 

Redundancy in electrohydraulic control systems is accomplished by 
either the force-sharing or the detection-correction method. Force-sharing 
or, more precisely, force-summing is accomplished by the simultaneous use 
of parallel control vinits . The summation of control forces may occur either 
within the actuator or directly on the load. The simplicity and directness of 
this method accounts for its prevalence today. The detection-correction 
method, unlike force-sharing, operates with series elements. Redundancy 
is developed by removing any failed component from the system and replacing 
it with a standby. A system malfunction is detected by comparing pertinent 
parameters of the operational system with those of a reference system. The 
reference system's parameters may be generated by various methods, one of 
which is the use of a mathematical model of the system. The operational sys- 
tem is assumed to be operating correctly when the differences between the 
compared parameters remain below some set limit. 


REDUNDANCY BY MATHEMATICAL MODELING 

An example of a fail/operate redundant electrohydraulic servosystem 
which employs the mathematical modeling technique is shown in Figure 1 . 

The actuator's load position command /3 is applied simultaneously to 

c 

both the computerized model and the physical system. The reference parame- 
ter used in this example is the load's position other parameters that could 

have been used are the actuator's position or the servovalve's spool position. 



COMPUTER 



Figure 1. Fail/operate electrohydraulic servosystem. 


When the difference between the measured load position <t) and the calcu- 
lated load position ( 3 ^^ (t) exceeds the allowable error ±6 q set in the compara- 
tor, the system is assumed to have sustained a failure. The output signal from 
the comparator then energizes the necessary corrective device such as a 
solenoid, which removes the failed component and replaces it with a standby. 

The magnitude of an allowable error is determined from the dynamic 
performance tolerance placed on that particular control system. The compu- 
tational electronics that comprise the error detection system must be capable 
of providing transient data of the reference parameter with sufficient accuracy 
to enable detection of a failure when the performance tolerances of that system 
are exceeded. For low-performance systems, a simple RC lag circuit may be 
sufficient, whereas more sophisticated systems may require models consisting 
of several operational amplifiers . 


2 




The method just described works very well for systems that do not en- 
counter external disturbance forces. However, for systems that do, such as 
air-surface controllers and thrust-vector controllers, the above method can 
produce the erroneous conclusion that a component has failed since the track- 
ing error may exceed the set threshold limits of the comparator during the 
time the external force is applied. 


LOAD COMPENSATION 


One method of correcting this problem would be to increase the 
threshold limits placed on the comparator. This, however, would decrease the 
sensitivity of the system to detect malfunctions as well as increase the time 
required for correction. Another means is to modify the calculated reference 
parameter so that it reflects the perturbations of the physical system. Theo- 
retically, this can be accomplished if one knows the magnitude and direction 
of the disturbance force. This information can be obtained from the pressure 
differential measurement made across the actuator's piston. 

The measured pressure differential has two components: that which 
results from command signals and that which is produced by an external 
disturbance force: 

measured command disturbance 

Since the mathematical model can easily be programed to yield the pressure 
differential developed by the command, the AP induced into the system by the 
disturbance force can be obtained by subtracting AP command from AP 
measured: 


AP^. = AP . - ^P j • (2) 

disturbance measured command 

Knowing the dynamics of the control system, one can derive the transfer func- 
tion which relates the disturbance force to the induced pressure differential in 
the actuator. This can be written in a general form as 


Ap 


disturbance 


F 


disturbance 


A(S) 

B(S; 


(3) 


A second transfer function that relates the load's position perturbations caused 
by external disturbance forces must also be derived. It can be written as 
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( 4 ) 


^Id ^ D(S) 

F,.' , B(S) 

disturbance 

From these two transfer functions, one cam obtain the compensation network, 
K(S), which, when multiplied by "^^jj^sturbance’ load's posi- 
tion perturbations. This network is obtained by dividing equation (4) by 
equation (3) , yielding 


at? 


Id 

disturbance 


= D(S) 
A(S) 


= K(S) 


(5a) 


or 


/?, , = K(S) AP,_ , (5b) 

'^Id disturbance 

where AP was calculated as indicated by equation (2) . Adding these 

cii s uurDs nc © 

perturbations to the calculated load position, one obtains a new and more 

accurate value of the load position which can now be used as the new 
reference parameter. 

iT^(t) =/?ic(t) +/?id(t) . (6) 

A schematic of a fail/operate system using this external force compensation 
technique is shown in Figure 2 . 

CONCEPT VERIFICATION TESTING 

A test program was devised to verify the disturbance load compensation 
concept and to establish a criterion for the magnitude of tracking accuracy 
which the mathematical model could produce when measured with respect to a 
physical system. A Saturn IB H-1 engine thrust vector control system was 
used for these tests. An illustration of the test configuration and the location 
where test data were recorded are shown in Figure 3. The measured parame- 
ters were: 

|3 - Position of the servoactuator piston rod, measured with respect 

to the servoactuator housing. 
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COMPUTER 



Figure 2. Fail/operate electrohydraulic servosystem with 
external load compensation. 


/3 - Position of the engine measured with respect to the frame of the 

engine simulator. 

AP - Pressure differential measured across the servoactuator piston, 
m 

A block diagram of the mathematical model as it was programed on the 
analog computer is shown in Figure 4. The assumptions and derivations of 
equations used to generate Figure 4 are presented in the Appendix. The sym- 
bols used in the block diagram are listed in this report in the Definition of 
Symbols . 
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STRUCTURAL ACTUATOR 
COMPLIANCE COMPLIANCE 
















The first test was performed to determine the computational accuracy 
of the mathematical model for both engine position commands and external 
disturbance forces. This was accomplished by developing tracking errors for 
various system parameters. These error signals were generated by subtract- 
ing the computed value from its measured counterpart on the physical system. 
Tracking errors were generated for the following system parameters: engine 
position /3 , actuator position ^ , and actuator pressure differential Ap. 

I © 3. 

These errors can be expressed mathematically as: 


6B -B _ 

• 

(7) 

e am ec 

5B = 13 -B 

# 

(8) 

a am ac 

6AP=AP -ap 
m c 

« 

(9) 


The results of the test for 1/2 deg and 1 deg commands are shown in Figures 
5 and 6, respectively. The maximum recorded errors were 


Command 



6AP 

_ (deg) 

(deg) 

(deg) 

(N/cm2 

Step 1/2 

0.08 

0.1 

19.30 

Step 1 

0.16 

0.2 

35.84 


Next, step disturbance loads of ±8896 N (±2000 lb) were applied to the engine, 
while the servoactuator was being commanded to hold zero position. The data 
recorded during this test are shown in Figure 7. The following maximum 
tracking errors were measured: 

Disturbance Loads 6/3 6/3 

a e 

Step ±8896 N (±2000 lb) 0.35 deg 0.46 deg 

The tracking errors determined during these tests will serve as a baseline for 
comparison in the evaluation of the load compensation technique. 
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Figure 5. One -half -degree step command with uncompensated 

reference system. 



Figure 6. One-degree step command with uncompensated reference system. 
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Figure 7. 8896-N step disturbance force with uncompensated reference system. 



COMPENSATION NETWORK TESTS 


The mathematical model was then changed to include compensation 
networks for both the engine and actuator position reference parameters. The 
transfer functions that relate each of the chosen reference parameters to the 
disturbance force are given as 




^disturbance 


A^t. (K -K )S^ + Tk KK +a 2(K -K )1 S 
f s eg L eg s c s eg -I 

D(S) 


( 10 ) 


and 


B (S) A^K t3^+ (K K K +K K K^At.+ A^K )S+K K K^A 
e s_f s eg c eg v fb f s eg v fb 


disturbance 


D(S) 


( 11 ) 


where the denominator D(S) is the system characteristic equation which is 
given by 


D(S) = MA^K T^S‘‘ + 
s I 


A^K (M + DtJ+AK K^K Mt^ + .MK K K 
s f vfbeqf eqsc 


A^K D+AK K K (M + Dr^)+DK K K + A^K K 
s V fb eq f eq s c eq s f 

( 12 ) 


A K„ K K K T, + A K K K D + A^ K K 
fb V eq s f v fb eq eq s 


+AK K K K 
fb V eq s 


These transfer functions were derived from the block diagram shown in 
Figure 4. The other transfer function required for calculating the compensa- 
tion network is 


AP (S) 
m 


^disturbance 


-K K 

eg s 


At^2 


K K„ T. + A)S + K K 


fb f 


V fbJ 


D(S) 


, (13) 


which was also derived from Figure 4. 
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Since two reference parameters were being generated for this test, two 
load compensation networks were necessary. The network required to yield 
the engine position perturbations is obtained by dividing equation (11) by 
equation (13), yielding 


K (S) 


K t.s2 + (k K K + K K K^At^ + A^K ) S + K K K„ A 
SI ^seqc eqyfb f s/ eqvfb 

K K r A t^S^ + (k Kt^ + a) S + K K ' 
eqsl_f '■vfbf ' vfb 


(14) 


The compensation network for actuator perturbation is obtained by dividing 
equation (10) by equation (13), yielding 

A^t (k -K )s2 + Fk K K + A^ fK - K 
f ^ s eg' L eg s c ^ s eq 

^ K K [At^S^ + (k K T^ + a) S +K K^l 

eqs|_f 'vfbf ' vfbj 



A block diagram of the mathematical model that was programed on the 
AD-64 analog computer and used for the test is shown in Figure 8. This test, 
like the first, was divided into two parts. The first was performed to establish 
the tracking errors when no disturbance forces were’ present. The measured 
tracking errors for a 1-deg step command were 


Command 




Step 1 deg 


0.17 deg 


0.29 deg 


as shown on the recorded test data in Figure 9. 


Both of these errors are greater than those recorded when using the 
imcompensated model. This is caused by a difference which exists between 
the measured pressure differential and the calculated pressure differential, 
even though no external loads were present. Thus, the tracking error in the 
AP parameter (shown on trace 8 of Figure 9) makes it appear to the model as 
if a disturbance load were present and thus produces an additional displace- 
ment in both actuator and engine positions. 

For the second half of the test, a disturbance force was again applied, 
and the tracking errors were measured. The maximum recorded errors were 
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Figure 8. H-1 engine thrust vector control system including the 
external force compensation. 

Disturbance Force ^^e 

Step 8896 N (2000 lb) 0.10 deg 0.40 deg 

as shown in Figure 10. The magnitude of these errors indicates that a sub- 
stantial improvement in the system tracking accuracy can be obtained with the 
addition of the load compensation network. The actuator tracking accuracy 
was improved by a factor of 3.5. 


TRACKING ERROR SENS.ITIVITY 

A point of academic interest is the sensitivity of the tracking errors to 
variations in system parameters. To illustrate these effects, the damping 
ratio and natural frequency will be varied on a simple second -order system. 
Let the transfer function for the physical system be given as 

Xi.(Sj ^ ^ (K 

X (S) s2 + 2;iWiS + OJi^ ’ 
c 

where the subscript 1 denotes a physical system parameter . 
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Figure 10. 8896-N step disturbance force with compensated reference system- 
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The transfer function used in the mathematical model is 
Xo(S) _ 

(S) + ^2^ 


( 17 ) 


The mathematical model parameters, denoted by the subscript 2, are considered 
constant and programed into the model at their nominal system values. The 
tracking error Ax is then generated as shown in Figure 11. 


Xc(S) 


PHYSICAL SYSTEM 



Figure 11. Tracking error sensitivity model reference system. 

A general expression describing the error resulting from a unit step 
command is 


:(S)=( 


+ 2 + 2^2^28 s 


■)i ’ 


or, written in the time domain, 


^x(t) = ' ' ' sin 

^l 1 - 




in (*^ 2 Ni - ^ 2 ^ t - 
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The phase angles ip and (p are 


ip - tan 
(p = tan 






-^1 


<2 


The effects of variations in and oj^ were investigated by plotting 
equation (19) versus time. The first set of curves, shown in Figure 12, illus- 
trates the effects of varying the system damping ratio (^i) v^ile holding all 
other parameters constant. 


= CO 2 = 6.00 Hz 
^2 = 0.707 . 

A second set of curves, shown in Figure 13, was plotted for variations in the 
system's natural frequency (coi). Again, all the other parameters were held 
constant. 


a >2 = 6.00 Hz 
= ^2 = 0.707 . 

The most obvious difference between the two sets of curves is the time varia- 
tion associated with the maximum tracking error when the system's natural 
frequency is the variable. 


A better perspective of the effects of these parameter variations can be 
seen when one plots the data shown in Figures 12 and 13 in the form of maxi- 
mum tracking error versus percentage of change in parameter. Where the 
percentage in parameter is given by 


percentage change = 


system value - model value fx lOo) 
system valve 


( 20 ) 


the results are shown in Figure 14. This curve clearly illustrates that varia- 
tions in the system's natural frequency will produce greater tracking errors 
than the same variations in the system damping ratio. 
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Figure 12 . Normalized tracking error vs time for second-order system with 

^2 as the variable parameter. 


= 3.01 Hz 
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Figure 13. Normalized tracking error vs time for second-order system with 

0)2 as the variable parameter. 





Figure 14. Normalized tracking error vs percentage change in 
system parameters for second -order systems. 

CONCLUSIONS 

Two conclusions were formed as a result of this study. First, the 
inclusion of the external load compensation into the mathematical model im- 
proves the reference parameter's tracking accuracy during the presence of 
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external disturbance to the extent that mathematical modeling is a method of 
implementing redundancy management for electrohydraulic servoactuators. 

This technique is being incorporated into a device called the digital interface 
unit (DIU) . The DIU will serve as the jimction between a four-line data bus 
and the servoactuators. In addition to calculating the reference parameter 
and the tracking error, the DIU will provide the failure detection and correc- 
tion logic necessary for a fail/operate -fail/operate redundant system. The 
DIU also converts the actuator position command from a digital to an analog 
signal and performs a prefli^t system checkout and inflight status monitoring. 

The second conclusion pertains to the choice of a reference parameter. 
This study has shown the actuator's position to be a better reference parameter 
than the engine position, which is illustrated by the magnitude of the tracking 
errors as shown in Figure 9. These differences are the result of using a 
simplified mattiematical model. One can hypothesize that the best reference 
parameter would be the first measurable state variable; that is, the one which 
corresponds to the highest order derivative in the system. With a simplified 
mathematical model, the nonlinearities and higher-order effects which occur 
after the first measurable parameter produce successively larger tracking 
errors in the parameters that follow. 
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APPENDIX 

DERIVATION OF SYSTEM EQUATIONS 

The equations that are represented in block diagram form in Figure 1 
were derived based on the following assumptions: 

1. Second -order and nonlinear effects in the servovalve were neglected; 
the servovalve is represented by a constant K^, having the units cmVs/deg. 

2. The geometric relationship that describes the linear motion of the 
actuator as a function of the rotational motion of the engine is 

X(t)=e(t) . (A-1) 

The ideal actuator position, /3^ , can be calculated as 

iSi = / ^dt , (A-2) 

0 

* 2 

where Q (cmys) is servovalve flow rate and A (cm ) is the piston cross- 

sectional area. 


However, to obtain the actual actuator position, j8 , one must include 

H 

the effects of the oil compressibility. With the aid of Figure 3 this relation- 
ship can be shown to be 


K 

/3 = i3. + -^ (^ - ^ ) 
a 1 K ^e a 
o 


(A -3) 


By lumping the structural compliance, K , with the oil compliance, K , an 

s o 

equivalent spring rate, K , can be obtained, where 

eq 


K K 

K = ° ^ 

eq K +K 
os 


(A^) 
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Thus, equation (A-3) can be written as 


'’a = - V tS * '’e • 

The last equation required to describe the system is Euler's equation of motion 
for the engine . This can be written as 


K 

eq 


<^i-V 


- F 


disturbance 





(A-6) 


where F,. , , represents the external disturbance force acting on the 

disturbance ^ ® 

engine and D is the engine viscous damping coefficient. 


A lead-lag pressure feedback compensation network was incorporated 
into the servovalve to improve its stability and dynamic performance. It is 
represented in the block diagram as 


K S 
c 

1 + T^S 

The actuator position was feedback with a gain, K^, to form the closed-loop 
system. 
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